Siyiphumeze njani iSonarQube kwaye saqonda amandla ayo amakhulu

Siyiphumeze njani iSonarQube kwaye saqonda amandla ayo amakhulu

Singathanda ukwabelana ngamava ethu okuphumeza iqonga lokuhlalutya rhoqo kunye nokulinganisa umgangatho wekhowudi ye-SonarQube kwiinkqubo ezikhoyo zokuphuhlisa inkqubo ye-DPO (ukongeza kwi-Alameda yokugcinwa kunye nenkqubo yokucima i-accounting) ye-National Settlement Depository.

I-National Settlement Depository (i-Moscow Exchange Group of Companies) yenye yeenkampani eziphambili zeziseko zezemali ezigcina kwaye zirekhode izibambiso zabanikezeli baseRashiya nabangaphandle abaxabisa ngaphezu kwe-50 yezigidigidi zee-ruble. Umthamo okhulayo wemisebenzi eyenziwa yinkqubo, kunye nokunyuka okuqhubekayo kokusebenza, kufuna ukugcina umgangatho ophezulu wekhowudi yomthombo weenkqubo. Esinye sezixhobo zokufezekisa le njongo yi-SonarQube static analyzer. Kweli nqaku, sichaza amava aphumeleleyo okuphumeza ngaphandle komthungo i-SonarQube static analyzer kwiinkqubo ezikhoyo zophuhliso lwesebe lethu.

Ngokufutshane malunga nesebe

Ubuchule bethu bubandakanya ezi modyuli zilandelayo: iintlawulo kubathengi be-NSD, ulawulo lwamaxwebhu e-elektroniki (EDF), ukusetyenzwa kwemiyalezo yogcino zorhwebo (ubhaliso lweentengiselwano ezingaphandle kotshintshiselwano), imijelo yonxibelelwano ngekhompyutha phakathi kwabathengi ne-NSD, nokunye okuninzi. Ngokubanzi, umaleko omkhulu womsebenzi kwicala lobugcisa bemisebenzi. Sisebenza ngesiseko sezicelo. Izicelo zabaxeli zisetyenzwa ngabahlalutyi: baqokelela iimfuno zabathengi kwaye basinike umbono wabo wendlela ekufuneka ingene ngayo kwinkqubo. Ukuqhubela phambili, iskimu esiqhelekileyo: uphuhliso lwekhowudi - uvavanyo - ukusebenza kwesilingo - ukuhanjiswa kwekhowudi kwisiphaluka esivelisayo kumthengi othe ngqo.

Kutheni iSonarQube?

La ngamava okuqala esebe lethu ekuphumezeni iqonga lolawulo lomgangatho wekhowudi - ngaphambili besikwenza ngesandla, ukuphononongwa kwekhowudi kuphela. Kodwa umthamo okhulayo womsebenzi ufuna ukuzenzekelayo le nkqubo. Ukongezelela, kukho nabasebenzi abangenamava kwiqela abangaqhelananga ngokupheleleyo nemimiselo yophuhliso lwangaphakathi kwaye bavame ukwenza iimpazamo ezininzi. Ukulawula umgangatho wekhowudi, kwagqitywa ekubeni kuphunyezwe i-analyzer static. Kuba iSonarQube sele isetyenzisiwe kwezinye iinkqubo ze-NSD, akuthathanga xesha lide ukukhetha. Ngaphambili, oogxa abavela kwamanye amacandelo bayisebenzisela ukuhlalutya ikhowudi yee-microservices kwinkqubo ye-Alameda (i-NSD's own depository and clearing accounting system), kwi-CFT (inkqubo yolwazi ye-accounting, ibhalansi, ukulungiswa kwe-mandatory kunye nengxelo yangaphakathi), kwezinye izinto. iinkqubo . Ukuvavanya, sigqibe kwelokuba siqale ngenguqulelo yasimahla yeSonarQube. Ngoko masiqhubele phambili kwityala lethu.

Inkqubo yokuphunyezwa

Si:

  • indibano ezenzekelayo yenkqubo kwiTeamCity;
  • cwangcisa inkqubo yokulayisha ikhowudi nge-MergeRequest ukusuka kwisebe elibonakalayo ukuya kwi-master branch kwi-GitLab (inkqubo yophuhliso ngokwe-GitHub Flow);
  • I-SonarQube ilungiselelwe ukuhlalutya ikhowudi yenkqubo ye-DPO kwishedyuli.

Injongo yethu: sebenzisa uhlalutyo lwekhowudi oluzenzekelayo kwiinkqubo ze-CI/CD ze-AVE.

Kufuneka wenze ngokwezifiso: inkqubo yokukhangela ngokuzenzekelayo ikhowudi ngumhlalutyi omileyo kunye neMergeRequest nganye kwisebe eliphambili.

Ezo. umfanekiso ekujoliswe kuwo umi ngolu hlobo lulandelayo: kamsinya nje ukuba umphuhlisi ulayishe utshintsho kwisebe lecandelo, ukukhangela okuzenzekelayo kweempazamo ezintsha kwikhowudi iqala. Ukuba akukho ziphoso, ngoko ke utshintsho luvunyelwe ukuba lwamkelwe, ngaphandle koko iimpazamo ziya kufuneka zilungiswe. Kakade kwinqanaba lokuqala, sakwazi ukuchonga inani elithile leempazamo kwikhowudi. Inkqubo inezicwangciso eziguquguqukayo kakhulu: inokuqwalasela ngendlela yokuba isebenze imisebenzi ethile yabaphuhlisi, kwinkqubo nganye kunye nesimbo senkqubo.

Ukuqwalasela i-QualityGate kwi-SonarQube

Uhlalutyo lwe-QualityGate yinto esiyifunda emathunjini e-Intanethi. Ekuqaleni, sasebenzisa indlela eyahlukileyo, intsonkothe ​​ngakumbi kwaye, ngeendlela ezithile, ayichanekanga ngokupheleleyo. Okokuqala, siqhube iskena nge-SonarQube kabini: siskena isebe elibonakalayo kunye nesebe apho siza kudibanisa isebe elibonakalayo, kwaye emva koko sathelekisa inani leempazamo. Le ndlela yayingazinzile kwaye ayizange ihlale inika umphumo ochanekileyo. Kwaye emva koko siye safunda ukuba endaweni yokusebenzisa i-SonarQube kabini, unokumisela umda kwinani leempazamo ezenziweyo (QualityGate) kwaye uhlalutye kuphela isebe olilayishayo kwaye uthelekise.

Siyiphumeze njani iSonarQube kwaye saqonda amandla ayo amakhulu

Okwangoku, sisasebenzisa ukujonga ikhowudi yakudala. Kufuneka kuqatshelwe ukuba i-SonarQube ayihambelani nezinye iilwimi zeprogram, kuquka iDelphi. Okwangoku, kwinkqubo yethu, sihlalutya kuphela ikhowudi ye-PLSql.

Isebenza ngolu hlobo:

  • Sihlalutya kuphela ikhowudi ye-PL/SQL yeprojekthi yethu.
  • I-QualityGate iqwalaselwe kwi-SonarQube ukuze inani leempazamo linganyuki ngokuzibophelela.
  • Inani leempazamo ekuqhutyweni kokuqala lalingama-229. Ukuba kukho iimpazamo ezininzi ngexesha lokuzibophelela, ngoko ukudibanisa akuvumelekanga.
  • Ukuqhubela phambili, ngokuxhomekeke ekulungisweni kweempazamo, kuya kwenzeka ukuba kulungiswe i-QualityGate.
  • Unokongeza izinto ezintsha zokuhlalutya, umzekelo, ukugubungela ikhowudi kunye neemvavanyo, njl.

Inkqubo yomsebenzi:

Siyiphumeze njani iSonarQube kwaye saqonda amandla ayo amakhulu

Kwizimvo zeskripthi, unokubona ukuba inani leempazamo kwisebe lecandelo alinyukanga. Ngoko yonke into ilungile.

Siyiphumeze njani iSonarQube kwaye saqonda amandla ayo amakhulu

Iqhosha lokudibanisa liyafumaneka.

Siyiphumeze njani iSonarQube kwaye saqonda amandla ayo amakhulu

Kumagqabantshintshi eskripthi, unokubona ukuba inani leempazamo kwisebe lefitsha liye laba ngaphezulu kunokuvunyelwa. Ngoko yonke into i-BAD.

Siyiphumeze njani iSonarQube kwaye saqonda amandla ayo amakhulu

Iqhosha lokuhlanganisa libomvu. Okwangoku, akukho sithintelo ekulayisheni utshintsho kwikhowudi ephosakeleyo, kodwa oku kwenziwa ngokwengqiqo yomphuhlisi onoxanduva. Kwixesha elizayo, unokuthintela izibophelelo ezinjalo ukuba zenziwe kwisebe eliphambili.

Siyiphumeze njani iSonarQube kwaye saqonda amandla ayo amakhulu

Ukujongana nezinambuzane

Emva koko, kufuneka ujonge zonke iimpazamo ezifunyenwe yinkqubo, kuba iSonarQube ihlalutya ngokwemigangatho engqongqo. Into ayijonga njengempazamo isenokungabi yeyodwa kwikhowudi yethu. Ke ngoko, kufuneka ujonge kwaye uqaphele ukuba le yimpazamo ngenene, okanye akukho mfuneko yokuhlela kwiimeko zethu. Ngaloo ndlela, sinciphisa inani leempazamo. Ekuhambeni kwexesha, inkqubo iya kufunda ukuqonda ezi nuances.

Size ngantoni

Injongo yethu yayikukuqonda ukuba ngaba kufanelekile kwimeko yethu ukudlulisela ukuqinisekiswa kwekhowudi kwi-automation. Kwaye umphumo waphila ngokuvisisana nolindelo. I-SonarQube isivumela ukuba sisebenze ngeelwimi esizidingayo, yenza uhlalutyo olufanelekileyo, kwaye inethuba lokufunda kwiingcebiso zabaphuhlisi. Ngokubanzi, sonwabile ngamava ethu okuqala ngeSonarQube kwaye siceba ukuphuhlisa phambili kweli cala. Silindele ukuba kwixesha elizayo siza kukwazi ukugcina ixesha elininzi kunye nomgudu wokuhlaziywa kwekhowudi kwaye senze kube ngcono ngokuphelisa into yomntu. Mhlawumbi kwinkqubo siya kufumanisa iintsilelo zeqonga, okanye, ngokuchaseneyo, siya kuqinisekisa kwakhona ukuba le nto yinto epholileyo enamandla amakhulu.

Kweli nqaku, sithethe malunga nokuqhelana kwethu ne-SonarQube static analyzer. Ukuba unemibuzo, nceda ubhale kwizimvo. Ukuba unomdla kwesi sihloko, kupapasho olutsha siza kuchaza ngokubanzi indlela yokumisela yonke into ngokuchanekileyo kwaye ubhale ikhowudi ukwenza itshekhi enjalo.

Umbhali wokubhaliweyo: atya

umthombo: www.habr.com

Yongeza izimvo